CVE-2014-3059 Unspecified vulnerability in the Administrative Console on the IBM WebSphere DataPower XC10 appliance 2.5 allows remote attackers to obtain administrative privileges by leveraging access to an eXtreme...
HighCVSS 10.0
EPSS 2.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in the Administrative Console on the IBM WebSphere DataPower XC10 appliance 2.5 allows remote attackers to obtain administrative privileges by leveraging access to an eXtreme Scale distributed ObjectGrid network.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm websphere datapower xc10 appliance firmware | = 2.5.0.0 | No fix listed |
| ibm websphere datapower xc10 appliance | All versions | No fix listed |
References
- IT03476 vendor-advisory
- www-01.ibm.com patch vendor-advisory
- ibm-xc10-cve20143059-sec-bypass(93533) vdb-entry